---
id: 651
title: "The rise of device code phishing"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/the-rise-of-device-code-phishing/"
published_at: "2025-03-11 12:00"
tags: ["microsoft", "phishing", "red-team", "device-code", "oauth", "mfa-bypass", "token-theft"]
phying_url: "https://phying.com/item/651"
lang: en
---

# The rise of device code phishing

## Summary

Device code phishing tricks victims into entering attacker-generated codes on legitimate login pages, yielding refresh tokens that bypass MFA for long-term access; this piece details the attack chain.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2025-03-11 12:00
- **Original:** https://www.bugcrowd.com/blog/the-rise-of-device-code-phishing/
- **Phying News:** https://phying.com/item/651